10.2.8: #319

Framework/etc/csp_whitelist.xml

@@ -0,0 +1,20 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<!-- 2023-08-05
+1) «Refused to load the stylesheet 'https://maxcdn.bootstrapcdn.com/font-awesome/latest/css/font-awesome.min.css'
+because it violates the following Content Security Policy directive:
+"style-src *.adobe.com *.aptrinsic.com fonts.googleapis.com 'self' 'unsafe-inline'".
+Note that 'style-src-elem' was not explicitly set, so 'style-src' is used as a fallback.»:
+https://github.com/mage2pro/core/issues/319
+2) https://magento.stackexchange.com/a/312254 -->
+<csp_whitelist
+	xmlns:xsi='http://www.w3.org/2001/XMLSchema-instance' 
+	xsi:noNamespaceSchemaLocation='urn:magento:module:Magento_Csp:etc/csp_whitelist.xsd'
+>
+	<policies>
+		<policy id='style-src'>
+			<values>
+				<value id='bootstrapCdn' type='host'>*.bootstrapcdn.com</value>
+			</values>
+		</policy>
+	</policies>
+</csp_whitelist>

composer.json

@@ -1,6 +1,6 @@
 {
 	"name": "mage2pro/core"
-	,"version": "10.2.7"
+	,"version": "10.2.8"
 	,"description": "Mage2.PRO core package."
 	,"type": "magento2-module"
 	,"homepage": "https://mage2.pro"